Function sealed_dir 

pub fn sealed_dir(project_state: &Path, unit: &str, key: &str) -> PathBuf

Where a sealed set lives: <project state>/held-out/<unit>/req-<key>/ (run-time task sets stay at <unit>/<task>/).